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Sir: 

Applicants hereby submit this Amended Appeal Brief to the Board of Patent Appeals and 
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any fees required under 37 C.F.R. §§ 1.16 to 1.21 from the Williams, Morgan & Amerson, 
P.C. Deposit Account No. 50 0786/2000.054600. 

The notice indicates that the required items are not provided under the proper heading or 
in the proper order. Applicants cannot identify any missing or misordered headings. 
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I. REAL PARTY IN INTEREST 

Advanced Micro Devices, Inc., the assignee hereof, is the real party in interest. 

II. RELATED APPEALS AND INTERFERENCES 

There are no related appeals or interferences of which Applicants, Applicants' legal 
representative, or the Assignee is aware of that will directly affect or be directly affected by or 
have a bearing on the decision in this appeal. 

III. STATUS OF THE CLAIMS 

Claims 1-21 are pending in the case. The Final Office Action rejected claims 1-4, 6-15, 
and 7-21. Claims 5 and 16 were deemed allowable, but were objected to as being dependent 
from a rejected parent claim. Claims 1-4, 6-15, and 7-21 are the subject of this appeal. 

IV. STATUS OF AMENDMENTS 

All previous amendments have been entered. 

V. SUMMARY OF CLAIMED SUBJECT MATTER 

As described on page 10, and shown in Figure 1, a block diagram of a communications 
system 10 is provided. The communications system 10 includes a user station 20 in 
communication with a central station 30 over a communication channel 40. In the illustrated 
embodiment, the user station 20 is a mobile computing device using a software modem 50 to 
communicate in accordance with a wireless communication protocol, such as GSM. The central 
station 30 may be a shared base station capable of serving a plurality of subscribers. The user 
station 20 may comprise a variety of computing devices, such as a desktop computer, a notebook 
computer, a personal data assistant (PDA), etc. For purposes of illustration, the user station 20 is 
described as it may be implemented using a notebook computer. The software modem 50 may 
be installed as an internal resource. As will be appreciated by those of ordinary skill in the art, 
the software modem 50 includes a physical layer (PHY) 70 implemented in hardware and a 
protocol layer 80 implemented in software. For purposes of illustration, the functions of the 
software modem 50 are described as they might be implemented for a GSM communication 
protocol, although other protocols may be used. 
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The PHY layer 70 converts digital transmit signals into an analog transmit waveform and 
converts an incoming analog received waveform into digital received signals. For transmit 
signals, the output signal of the protocol layer 80 is the transmit "on-air" information modulated 
about a zero Hz carrier (i.e., a carrierless signal). The PHY layer 70 mixes (i.e., mixing may also 
be referred to as upconverting) the carrierless transmit signal generated by the protocol layer 80 
in accordance with assigned time slot, frequency, and power level assignments communicated to 
the user station 20 by the central station 30 to generate the actual analog waveform transmitted 
by the PHY layer 70. The central station 30 also communicates time slot and frequency 
assignments to the user station 20 for incoming data. The incoming analog receive waveform is 
sampled and downconverted based on the assigned time slot and frequency parameters to 
recreate a carrierless (i.e., modulated about zero Hz) receive waveform. The protocol layer 80 
receives the carrierless receive waveform from the PHY layer 70 and performs baseband 
processing, decryption, and decoding to regenerate the received data. Collectively, the time slot, 
frequency, and power level (i.e., for transmit data only) assignments are referred to as control 
codes. 

The data received by the protocol layer 80 is encrypted. The functions of the protocol 
layer 80 include decoding and decrypting the received data, extracting the control codes and user 
data, and sending the control codes to the PHY layer 70. The commands sent to the PHY layer 
70 by the protocol layer 80 include a hidden authentication command. If the authentication 
command is missing or does not coincide with what is expected by the PHY layer 70, the PHY 
layer 70 inhibits further operation of the modem 50. 

As described on page 14, the modem driver 240 decrypts the received encrypted data and 
decodes the decrypted data to extract control codes and/or user data. The modem driver 
determines an authentication code based on the control codes after they are extracted. The 
specific construct of the authentication code may vary. For example, the authentication code 
may be a mathematical combination of the control code values or a binary manipulation of the 
bits making up the values (i.e., similar to a checksum). Alternatively, the modem driver 240 may 
encrypt the control codes based on a secret key provided by the vendor and stored in a secure 
location (e.g., in the system BIOS 170 or in a secure storage device on the ACR card 215. After 
determining and storing the authentication code, the modem driver 240 stores the extracted 
control codes for transfer to the PHY hardware 220. 
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The modem driver 240 passes the control codes to the PHY hardware 220. Coincident 
with the command that includes the control codes, the modem driver also sends the 
authentication code in such a way that is hidden or hard to detect for a hacker trying to co-opt the 
modem driver 240. Because the authentication code is hidden, the hacker may try to modify the 
control codes without realizing that the authentication code exists. The PHY hardware 220 is 
adapted to recognize the inconsistency between the altered control codes and the authentication 
code and prevent the radio 230 from being operated. If no inconsistency between the control 
codes and the authentication code exists, the PHY hardware 220 accepts the control codes and 
configures the radio 230 based on the assigned time slot, frequency, and power level information 
contained in the control codes. 

Exemplary techniques for hiding the authentication code from normal detection include 
embedding the authentication code in normally unused bits on a data bus [page 15, lines 1-10] or 
by embedding the authentication code in unused and normally ignored data frames [page 5, lines 
1 1-25]. Sending the authentication code in a portion of the data communication framework that 
is normally unused or ignored is generically referred to herein as sending the authentication code 
"out-of-band." 

Thus, with respect to claim 1, a communications system (10), the invention comprises: 
a physical layer hardware unit (220) adapted to communicate data over a 
communications channel (40) in accordance with assigned transmission 
parameters, the physical layer hardware unit (220) being adapted to receive an 
incoming signal over the communications channel (40) and sample the incoming 
signal to generate a digital received signal; and [page 11, line 12 - page 12, line 2] 

a processing unit (100) adapted to execute a software driver (240) including 
program instructions adapted to extract control codes from the digital received 
signal, generate an authentication code, and transfer the control codes and the 
authentication code to the physical layer hardware unit (220), wherein the 
physical layer hardware unit (220) is adapted to signal a security violation in 
response to the control codes being inconsistent with the authentication code, 
[page 13, line 13 - page 15, line 10] 
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With respect to claim 12, a method for identifying security violations in a transceiver 
(50), the invention comprises: 

receiving digital data over a communications channel (40); [page 11, line 12 - 
page 12, line 2, page 16] 

extracting control codes from the digital received signal; [page 11, line 12 - page 
12, line 2, page 16] 

generating an authentication code based on at least one extracted control code; 
[page 14, lines 1-14, page 16] 

transferring the control codes and the authentication code to a physical layer 
hardware unit (220) of the transceiver (50); [page 14, lines 15-24, page 16] 
configuring assigned transmission parameters of the physical layer hardware unit 
(220) based on the control codes; and [page 14, lines 15-24, page 16] 
signaling a security violation in response to the control codes being inconsistent 
with the authentication code, [page 16] 

With respect to claim 21, a modem, the invention comprises: 

means for receiving digital data over a communications channel (40); [page 1 1 , 
line 12 - page 12, line 2, page 16] [reference 220] 

means for extracting control codes from the digital received signal; [page 1 1 , line 
12 - page 12, line 2, page 16] [reference 100, 240] 

means for generating an authentication code based on at least one extracted 
control code; [page 14, lines 1-14, page 16] [reference 100, 240] 
means for transferring the control codes and the authentication code to a physical 
layer hardware unit (220) of the modem; [page 14, lines 15-24, page 16] 
[reference 100, 240] 

means for means for configuring assigned transmission parameters of the physical 
layer hardware unit (220) based on the control codes; and [page 14, lines 15-24, 
page 16] [reference 220, 240] 

means for signaling a security violation in response to the control codes being 
inconsistent with the authentication code, [page 16] [reference 100, 220] 
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VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

A. Are claims 1, 7-12, and 18-21 obvious under 35 U.S.C. § 103(a) over Roeck (U.S. 
Patent No. 6,594,305) in view of Nay (U.S. Patent No. 5,237,567)? 

B. Are claims 2-3 and 13-14 obvious under 35 U.S.C. § 103(a) over Roeck and Nay 
in further view of Spelman (U.S. Patent No. 5,680,458)? 

C. Are claims 4 and 15 obvious under 35 U.S.C. § 103(a) over Roeck and Nay in 
further view of Mergard (U.S. Patent No. 5,881,248)? 

D. Are claims 6 and 17 obvious under 35 U.S.C. § 103(a) over Roeck and Nay in 
further view of Whitmire (U.S. Patent No. 6,1 15,817)? 

VII. ARGUMENT 

A. THE COMBINATION OF ROECK (U.S. PATENT NO. 6,594,305) AND 
NAY (U.S. PATENT NO. 5,237,567) FAILS TO OBVIATE ANY CLAIM UNDER 35 
U.S.C. § 103(A). 

The claimed subject matter, as set forth in independent claims 1, 12, and 21, includes the 
general features of Applicants receiving digital data over a communications channel, extracting 
control codes from the digital received signal, generating an authentication code based on at least 
one extracted control code, transferring the control codes and the authentication code to a 
physical layer hardware unit of the transceiver, configuring assigned transmission parameters of 
the physical layer hardware unit based on the control codes, and signaling a security violation in 
response to the control codes being inconsistent with the authentication code. 

To establish a prima facie case of obviousness under 35 U.S.C. § 103(a), three basic 
criteria must be met. First, the prior art reference (or references when combined) must teach or 
suggest all the claim limitations . In re Royka, 490 F.2d 981, 180 U.S.P.Q. 580 (CCPA 1974). 
Second, there must be some suggestion or motivation , either in the references themselves or in 
the knowledge generally available to one of ordinary skill in the art, to modify the reference or to 
combine reference teachings. That is, there must be something in the prior art as a whole to 
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suggest the desirability, and thus the obviousness, of making the combination. Panduit Corp. v. 
Dennison Mfg. Co., 810 F.2d 1561 (Fed. Cir. 1986). In fact, the absence of a suggestion to 
combine is dispositive in an obviousness determination. Gambro Lundia AB v. Baxter 
Healthcare Corp., 110 F.3d 1573 (Fed. Cir. 1997). The mere fact that the prior art can be 
combined or modified does not make the resultant combination obvious unless the prior art also 
suggests the desirability of the combination. In re Mills, 916 F.2d 680, 16 U.S.P.Q.2d 1430 
(Fed. Cir. 1990); M.P.E.P. § 2143.01. Third, there must be a reasonable expectation of success. 
The teaching or suggestion to make the claimed combination and the reasonable expectation of 
success must both be found in the prior art, and not based on applicant's disclosure . In re Vaeck, 
947 F.2d 488, 20 U.S.P.Q.2d 1438 (Fed. Cir. 1991); M.P.E.P. § 2142. The combination of 
Roeck and Nay fails to meet these criteria for a prima facie case of obviousness for several 
reasons. 

First, the combination of Roeck and Nay fails to teach every element of the claimed 
invention. Roeck describes a ping protocol for determining whether a link in a network system 
utilizing cable modems is operational regardless of a modem's registration status. See Roeck, 
col. 1, lines 15-20. However, as admitted by the Examiner, Roeck is completely silent with 
regard to the use of authentication codes or determining security violations. The Examiner 
therefore alleges that Nay describes generating an authentication code. Applicants respectfully 
disagree. Nay describes using parity bits, check bits, and/or checksums for error detection and/or 
correction. See Nay, col. 37, lines 35-62. Nay is completely silent with regard to any type of 
authentication technique or determining whether or not a security violation has occurred. Nay 
fails to address security, only data transmission accuracy. A system constructed by combining 
Roeck and Nay would simply attempt to correct a transmission error if the received data did not 
match the checksum using known ECC techniques or request the data be transmitted again. This 
is similar to what modems implementing ECC code already do with data received over the 
communication channel. Data errors are not classified as security violations. Identifying a data 
transmission error simply does not equate to identifying a security violation. 

In the Final Office Action, the Examiner maintains that Nay describes generating an 
authentication code by equating a data transfer error checking code to a security related 
authentication code. Applicants respectfully disagree with this construction. The Office Action 
indicates that Nay discovers errors in data transmission using a checksum. Even if assuming, 
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solely for the sake or argument, that the checksum of Nay equates to an authentication code, Nay 
still fails to signal a security violation in response to the checksum not matching the sent data. If 
Nay detects a problem, the data is corrected automatically using the ECC data or resent. Nay 
does not detect a security violation, because Nay does not contemplate that the data may be 
tampered with, but rather only that the data was not received properly. The Office Action asserts 
that a violation in Nay could be the result of tampering and, hence, the data error of Nay equates 
to a security violation. The Office Action fails to support this possibility based on the teachings 
of Nay , but rather just based on an ungrounded conclusory statement. One significant defect in 
this construction is that it completely ignores the effect of the "security" modifier to the violation 
term. As admitted by the Office Action Nay only looks at data integrity, regardless of the source 
of a data error. If Nay detects an error in the sent data, the data is corrected or resent and no 
violation of any kind is identified, much less a security violation . 

Second, Applicants submit that the cited references also fail to provide any suggestion or 
motivation for modifying the prior art of record to arrive at the claimed invention. As discussed 
above and as admitted by the Examiner, Roeck is completely silent with regard to the use of 
authentication codes or determining security violations. Moreover, as discussed above, Roeck is 
concerned with determining whether a link in a network system utilizing cable modems is 
operational regardless of a modem's registration status . Thus, Roeck is unconcerned with 
performing any authentication of the cable modem and consequently provides no suggestion or 
motivation to modify the prior art to incorporate any authentication techniques in the manner 
suggested by the Examiner. Nay is concerned with detecting and/or correcting errors that occur 
during transmission of data over a bus. Thus, Nay is unconcerned with authentication and 
consequently provides no suggestion or motivation to modify the prior art to incorporate any 
authentication techniques in the manner suggested by the Examiner. 

In the Advisory Action, the examiner admits that the grounds for combining Roeck and 
Nay are not grounded in the art themselves, but rather based on the Examiner's assessment of the 
level of knowledge of one of ordinary skill in the art. A recent Federal Circuit case emphasizes 
that, in an obviousness situation, the prior art must disclose each and every element of the 
claimed invention, and that any motivation to combine or modify the prior art must be based 
upon a suggestion in the prior art . In re Lee, 61 U.S. P. Q. 2d 143 (Fed. Cir. 2002). Conclusory 
statements regarding common knowledge and common sense are insufficient to support a finding 
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of obviousness. Id. at 1434-35. With respect to alleged obviousness, there must be something in 
the prior art as a whole to suggest the desirability, and thus the obviousness, of making the 
combination. Panduit Corp. v. Dennison Mfg. Co., 810 F.2d 1561 (Fed. Cir. 1986). In fact, the 
absence of a suggestion to combine is dispositive in an obviousness determination. Gambro 
LundiaAB v. Baxter Healthcare Corp., 110 F.3d 1573 (Fed. Cir. 1997). 

As grounds for combining Roeck and Nay, the Examiner states "It would be obvious to 
combine the communication system of Roeck with the authentication mechanism of Nay to 
prevent message tampering and improve security. In the Final Office Action , the Examiner 
further states, "[0]ne of ordinary skill in the art would recognize both the benefit and motivation 
to use the method of insuring data integrity, and prevent errors to secure a system and make it 
reliable." This statement supports Applicant's position that Nay is concerned only with data 
integrity for reliability purposes, not security purposes. As neither Roeck nor Nay is directed to 
preventing message tampering or improving security, the only grounds for such a combination 
arise from an improper use of Applicant's disclosure as a roadmap. 

Because the combination of Roeck and Nay fails to teach each and every element of the 
claimed invention, and the Office has failed to meet its burden of providing motivation to 
combine Roeck and Nay based on grounds found in the prior art, the prima facie case of 
obviousness is deficient. Accordingly, claims 1, 12, 21, and all claims depending therefrom are 
allowable. Applicants respectfully request the rejection of these claims be reversed. 

B. THE COMBINATION OF ROECK (U.S. PATENT NO. 6,594,305), NAY 
(U.S. PATENT NO. 5,237,567), AND SPELMEN (U.S. PATENT NO. 5,680,458) FAILS TO 
OBVIATE ANY CLAIM UNDER 35 U.S.C. § 103(A). 

Claims 2, 3, 13, and 14 are allowable for at least the reasons provided above for claims 1, 
12, and 21 . Spelman fails to correct the primary defects identified with Roeck and Nay. In 
rejecting claims 2, 3, 13, and 14 over Roeck and Nay in further view of Spelman, the Office 
Action suggests that it would be obvious to provide the Roeck-Nay system with out-of-band 
messaging to assure that the message has not been tampered with. The grounds for establishing 
combinability must be found in the prior art. Because Roeck and Nay are completely silent 
regarding identifying security violations, but rather only data transmission errors, it is 
inconceivable that grounds could be found in Roeck or Nay to combine Spelman therewith. Nay 
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would have no reason to send the checksum out-of-band with respect to the data, as data and 
checksums are conventionally always provided over the same channel. This combination 
constitutes an impermissible use of hindsight using Applicants' disclosure as a roadmap. For 
these additional reasons, claims 2, 3, 13, and 14 are themselves allowable, and Applicants 
respectfully request the rejection of these claims be reversed. 

C. THE COMBINATION OF ROECK (U.S. PATENT NO. 6,594,305), NAY 
(U.S. PATENT NO. 5,237,567), AND MERGARD (U.S. PATENT NO. 5,881,248) FAILS 
TO OBVIATE ANY CLAIM UNDER 35 U.S.C. § 103(A). 

Claims 4 and 15 are allowable for at least the reasons provided above for claims 1,12 and 
21 . Mergard fails to correct the primary defects identified with Roeck and Nay. In rejecting 
claims 4 and 15 in further view of Mergard, the Office Action suggest that it would be obvious to 
send the authentication code out-of-band and over an unused portion of the bus to improve bus 
performance. Again, Nay would have no reason to send the checksum out-of-band with respect 
to the data as data and checksums are conventionally always provided over the same channel. 
The authentication code is not sent out-of-band to improve bus performance, but rather to send 
the authentication code separately from the control codes to increase the difficulty that a 
malicious entity might have in identifying the authentication code. Again, this combination 
constitutes an impermissible use of hindsight using Applicants' disclosure as a roadmap. For 
these additional reasons, claims 4 and 15 are themselves allowable and Applicants respectfully 
request the rejection of these claims be reversed. 

D. THE COMBINATION OF ROECK (U.S. PATENT NO. 6,594,305), NAY 
(U.S. PATENT NO. 5,237,567), AND W ill i MIRK (U.S. PATENT NO. 6,115,817) FAILS 
TO OBVIATE ANY CLAIM UNDER 35 U.S.C. § 103(A). 

Claims 6 and 17 are allowable for at least the reasons provided above for claims 1 and 12. 
The Whitmire fails to correct the primary defects identified with Roeck and Nay. Applicants 
respectfully request the rejection of these claims be reversed. 
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VIII. CLAIMS APPENDIX 

The claims that are the subject of the present appeal are set forth in the attached "Claims 
Appendix." 

IX. EVIDENCE APPENDIX 

There is no separate Evidence Appendix for this appeal. 

X. RELATED PROCEEDINGS APPENDIX 

There is no Related Proceedings Appendix for this appeal. 

XI. CONCLUSION 

The rejections fail because the cited art of record fails to teach all the limitations of the 
claims and the grounds for combining Roeck and Nay cannot be supported. More particularly, 
the art of record fails to teach or suggest generating an authentication code based on at least one 
extracted control code, transferring the control codes and the authentication code to a physical 
layer hardware unit of a transceiver, configuring assigned transmission parameters of the 
physical layer hardware unit based on the control codes, and signaling a security violation in 
response to the control codes being inconsistent with the authentication code. Applicants 
therefore pray that the rejections be reversed and the claims be allowed to issue. 

Respectfully submitted, 

Date: September 18, 2006 /Scott F. Diring/ 

Scott F. Diring 
Reg. No. 35,119 

Williams Morgan & Amerson, P.C. 
10333 Richmond Avenue, Suite 1100 
Houston, TX 77042 
(713) 934-4070 
(713) 934-7011 (Fax) 

ATTORNEY FOR APPLICANTS 
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APPENDIX 
(Claims at Issue) 

1. A communications system, comprising: 

a physical layer hardware unit adapted to communicate data over a communications 
channel in accordance with assigned transmission parameters, the physical layer 
hardware unit being adapted to receive an incoming signal over the 
communications channel and sample the incoming signal to generate a digital 
received signal; and 

a processing unit adapted to execute a software driver including program instructions 
adapted to extract control codes from the digital received signal, generate an 
authentication code based on at least one extracted control code, and transfer the 
control codes and the authentication code to the physical layer hardware unit, 
wherein the physical layer hardware unit is adapted to signal a security violation 
in response to the control codes being inconsistent with the authentication code. 

2. The system of claim 1, wherein the authentication code comprises a hidden 
authentication code. 

3. The system of claim 1, wherein the software driver includes program instructions 
adapted to transfer the authentication code out-of-band with respect to the control codes. 

4. The system of claim 3, wherein the processor complex includes a data bus, and 
the software driver includes program instructions adapted to transfer the authentication code on 
an unused portion of the data bus. 

5. The system of claim 3, wherein the processing unit includes a data bus adapted to 
transfer data in frames having a fixed number of slots, and the software driver includes program 
instructions adapted to transfer the authentication code using a frame having more slots than the 
fixed number of slots. 
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6. The system of claim 1, wherein the software driver includes program instructions 
adapted to extract encrypted data from the digital received signal and decrypt the encrypted data 
to generate decrypted data including the control codes. 

7. The system of claim 6, wherein the software driver includes program instructions 
adapted to generate the authentication code based on the decrypted data. 

8. The system of claim 1, wherein the assigned transmission parameters include at 
least one of a power level assignment, a frequency assignment, and a time slot assignment. 

9. The system of claim 1, wherein the processing unit comprises a computer. 

10. The system of claim 9, wherein the computer includes: 

a processor complex adapted to execute the program instructions in the software driver; 
a bus coupled to the processor complex; and 

an expansion card coupled to the bus, the expansion card including the physical layer 
hardware. 

1 1 . The system of claim 1 , wherein the physical layer hardware unit is adapted to 
prohibit at least some communication over the communications channel in response to 
identifying the security violation. 
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12. A method for identifying security violations in a transceiver, comprising: 
receiving digital data over a communications channel; 

extracting control codes from the digital received signal; 

generating an authentication code based on at least one extracted control code; 

transferring the control codes and the authentication code to a physical layer hardware 

unit of the transceiver; 
configuring assigned transmission parameters of the physical layer hardware unit based 

on the control codes; and 
signaling a security violation in response to the control codes being inconsistent with the 

authentication code. 

13. The method of claim 12, wherein generating the authentication code further 
comprises generating a hidden authentication code. 

14. The method of claim 12, wherein transferring the control codes and the 
authentication code comprises transferring the authentication code out-of-band with respect to 
the control codes. 

15. The method of claim 14, wherein transferring the control codes and the 
authentication code comprises transferring the authentication code on an unused portion of a data 
bus communicating with the transceiver. 

16. The method of claim 14, wherein the transceiver is coupled to data bus adapted to 
transfer data in frames having a fixed number of slots, and transferring the control codes and the 
authentication code comprises transferring the authentication code using a frame having more 
slots than the fixed number of slots. 
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17. The method of claim 12, further comprising: 
extracting encrypted data from the digital received signal; and 

decrypting the encrypted data to generate decrypted data including the control codes. 

18. The method of claim 17, wherein generating the authentication code comprises 
generating the authentication code based on the decrypted data. 

19. The method of claim 12, wherein configuring assigned transmission parameters of 
the physical layer hardware unit based on the control codes comprises configuring at least one of 
a power level parameter, a frequency parameter, and a time slot parameter. 

20. The method of claim 12, further comprising prohibiting communication over the 
communications channel in response to identifying the security violation. 

21. A modem, comprising : 

means for receiving digital data over a communications channel; 

means for extracting control codes from the digital received signal; 

means for generating an authentication code based on at least one extracted control code; 

means for transferring the control codes and the authentication code to a physical layer 

hardware unit of the modem; 
means for means for configuring assigned transmission parameters of the physical layer 

hardware unit based on the control codes; and 
means for signaling a security violation in response to the control codes being 

inconsistent with the authentication code. 
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